$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa File: d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa (raw, json) Hash identifier: f9hAH5QF2cBSxN/6R4MemDSMzspiq8XQGFu+fB8K8kg= Subject key identifier: 78:64:6A:A0:56:BF:DD:1C:4D:58:94:3F:33:EE:D7:19:19:0A:2C:53 Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584A6825E03A20F2BE3548CA36B0 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 12202 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e0:3a:20:f2:be:35:48:ca:36:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=af91d08e-5406-444e-8317-6dc87ae9c331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:56:56:5c:06:a9:37:11:b5:94:6e:bc:99: b8:98:3f:8a:6d:b4:e0:34:6d:b8:75:64:17:62:6c: 4e:53:d0:ee:bf:46:54:5b:e8:d1:71:22:ee:2d:15: 35:a8:8b:d9:40:cf:6f:83:77:cf:b1:01:7c:27:38: 0e:14:65:89:0f:bc:6b:49:fe:5b:cf:23:6b:1a:72: b5:37:55:44:00:ad:65:16:da:73:a8:1a:d0:f1:e9: d6:2b:48:77:34:0f:81:dc:4a:eb:79:71:95:c5:9e: 66:96:a8:0e:4e:0f:2e:e2:00:60:4c:8a:86:ed:1c: 20:aa:86:15:b9:00:97:41:e2:03:18:8a:50:78:45: e4:af:18:66:c5:1c:80:5e:96:7c:0a:14:90:b8:50: 0f:ea:19:92:f9:51:10:c0:2d:2f:da:5a:f3:cd:8e: 50:40:ef:24:f2:2b:8a:e4:27:8c:65:dd:0b:27:52: 31:51:3c:25:d4:b2:48:6b:23:e7:66:53:ae:8a:84: 0d:27:45:9c:59:41:01:c5:43:f9:b0:f9:27:be:3f: 05:21:18:f5:15:4b:d0:d9:6d:9c:88:b5:76:b6:46: 14:89:75:7d:a1:e8:a9:9f:d1:ba:78:e8:f0:ad:ee: db:55:df:40:90:3f:df:e1:83:33:06:fe:0d:de:12: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:6A:A0:56:BF:DD:1C:4D:58:94:3F:33:EE:D7:19:19:0A:2C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0b:b5:d4:97:c8:50:90:6a:ef:b0:e7:4c:93:13:54:89:fb: 3f:6e:3c:eb:bb:08:27:0c:66:8b:23:5f:34:54:d0:b4:d3:5d: dc:fc:d9:fe:bf:8d:1f:d4:42:98:95:64:57:f9:d0:23:5e:41: ff:15:bf:57:f2:7f:ce:1f:d6:8b:ad:27:1e:c2:82:fc:53:cb: a7:5a:e0:ba:08:a3:9c:00:38:18:11:4f:02:0c:8c:9f:c4:66: 14:26:cc:1d:3c:15:cf:66:39:11:3b:8f:2c:ca:3d:47:4a:4c: 7e:f0:47:f0:48:2c:d5:f4:91:55:0b:db:4c:db:fc:28:0a:24: fe:db:6f:25:e6:89:fe:19:48:9c:ee:bb:89:82:b1:e9:cf:ca: 08:10:86:f5:a0:71:2d:8d:84:9c:05:ca:0d:b0:45:b1:15:9e: 7c:d6:19:58:06:d3:84:61:aa:80:cd:02:d7:e3:67:fd:64:9a: 93:de:81:01:91:d7:c2:76:b3:97:b7:c5:96:f4:28:db:a1:a3: 09:dd:3c:40:e7:e8:3e:76:fd:a6:fc:d5:9c:9a:2c:89:af:1c: 33:bc:1a:74:31:f1:93:a8:47:1d:e8:82:5c:c9:c9:06:6a:b6: 51:2d:2c:d2:82:bc:ca:37:30:60:06:33:db:a8:ef:7b:73:7d: a2:93:5e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJeA6IPK+NUjKNrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YWY5MWQwOGUtNTQwNi00NDRlLTgzMTctNmRjODdhZTljMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E9WVlwGqTcRtZRuvJm4mD+KbbTgNG24dWQX YmxOU9Duv0ZUW+jRcSLuLRU1qIvZQM9vg3fPsQF8JzgOFGWJD7xrSf5bzyNrGnK1 N1VEAK1lFtpzqBrQ8enWK0h3NA+B3ErreXGVxZ5mlqgOTg8u4gBgTIqG7RwgqoYV uQCXQeIDGIpQeEXkrxhmxRyAXpZ8ChSQuFAP6hmS+VEQwC0v2lrzzY5QQO8k8iuK 5CeMZd0LJ1IxUTwl1LJIayPnZlOuioQNJ0WcWUEBxUP5sPknvj8FIRj1FUvQ2W2c iLV2tkYUiXV9oeipn9G6eOjwre7bVd9AkD/f4YMzBv4N3hJWnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhkaqBWv90cTViUPzPu1xkZCixTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZDY2NTBiOTItMjJiNy0z ZDkwLThlNDAtNWJhZDM0ZjNiYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgLtdSXyFCQau+w50yTE1SJ+z9uPOu7CCcMZosjXzRU0LTTXdz82f6/ jR/UQpiVZFf50CNeQf8Vv1fyf84f1outJx7CgvxTy6da4LoIo5wAOBgRTwIMjJ/E ZhQmzB08Fc9mORE7jyzKPUdKTH7wR/BILNX0kVUL20zb/CgKJP7bbyXmif4ZSJzu u4mCsenPyggQhvWgcS2NhJwFyg2wRbEVnnzWGVgG04RhqoDNAtfjZ/1kmpPegQGR 18J2s5e3xZb0KNuhowndPEDn6D52/ab81ZyaLImvHDO8GnQx8ZOoRx3oglzJyQZq tlEtLNKCvMo3MGAGM9uo73tzfaKTXu8= -----END CERTIFICATE-----Generated at Fri Jul 11 04:36:30 2025 by rpki-client